WebAssembly: The Fly on the Wall Delivering Malware Past Secure Web Gateways
Engineering @ SquareX | | Cybersecurity, enterprise security, Malware Analysis, Red Team, Secure Web Gateway
‘Last Mile Reassembly Attacks’ evade every Secure Web Gateway in the market and deliver known malware to the endpointAt DEF CON 32, SquareX presented groundbreaking research curating vulnerabilities in Secure Web Gateways (SWGs) that leave organizations vulnerable to threats that these tools fail to detect. These traditional defenses, once considered the ... Read More
Secure Web Gateway Vulnerabilities Exposed: SquareX’s Research Stirs the Industry
Vivek Ramachandran, Founder & CEO of SquareX, at DEF CON Main Stage.At DEF CON 32 this year, SquareX presented compelling research that revealed the shortcomings of Secure Web Gateways (SWG) in protecting the browser and demonstrated 30+ foolproof methods to bypass them. Anybody can test these bypasses against their SWG at ... Read More
Identity crisis? Manageable. Identity attacks? Crisis!
Don’t let your employees fall prey to identity attacksIn the early internet days, logging in meant entering a username and password. If the password matched what the server had stored, you got in. Simple, right? But as online services grew, so did cyber threats. Passwords could be guessed, stolen, or reused, ... Read More
“Consider the Macro Perspective” — The Persistence of Macro-based Malware
“Consider the Macro Perspective” — The Persistence of Macro-based MalwareUse SquareX to put an end to their three-decade streakOffice documents, encompassing a range of formats such as Word, Excel, and PowerPoint, have become deeply entrenched in the daily operations of countless organisations worldwide.One can argue that Microsoft was ahead of its time ... Read More
10 Billion passwords leaked: What will hackers discover with yours?
Protect your enterprise from credential stuffing attacks with SquareXA few days ago, a massive leak of 10 billion passwords hit the internet, making it the largest collection ever. The only people who are not sweating from this news are those who believe in a monogamous one password to one account relationship ... Read More
“May I please access your data?” Browser Extension Seeks Risky Permissions!
Engineering @ SquareX | | browser extension, Browser Security, Cyber Attack Prevention, Cybersecurity
Manage the browser extensions used by your employees by restricting the permissions they can seekBrowser extensions have significantly evolved since their introduction in 1999. Ranging from dark mode readers, to password managers and sophisticated cybersecurity tools like SquareX, extensions provide great value to users in making daily browsing customised to their ... Read More
Malicious QR Codes — The Achilles Heel of Traditional Security Solutions
Malicious QR Codes — The Achilles Heel of Traditional Security SolutionsUse SquareX to block your employees from scanning malicious QR codes!According to KeepNetSecurity, of all phishing campaigns, 26% of all malicious links were embedded in QR codes and 89.3% of these quishing attacks were credential stealing attacks. This method of phishing is one ... Read More